update weekly #1140
update weekly #1140
Conversation
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 4.1.2 to 5.0.0. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](anchore/scan-action@64a33b2...4e08a16) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 5.0.0 to 5.1.0. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/CHANGELOG.md) - [Commits](anchore/scan-action@4e08a16...ef0b0b0) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
* chore: [jenkins/ssh-agent] Bump Docker image tag in "dockerfiles/mave... ... n/Dockerfile" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "dockerfiles/mult... ... i/Dockerfile" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "dockerfiles/node... ... /Dockerfile" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "dockerfiles/pyth... ... on/Dockerfile" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "build-docker-com... ... pose.yaml" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "docker-compose.y... ... aml" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "dockerfiles/gola... ... ng/Dockerfile" Made with ❤️️ by updatecli * chore: [jenkins/ssh-agent] Bump Docker image tag in "dockerfiles/andr... ... oid/Dockerfile" Made with ❤️️ by updatecli --------- Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
…... (#737) ... ockerfile Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
…#738) Made with ❤️️ by updatecli Co-authored-by: GitHub Actions <41898282+github-actions[bot]@users.noreply.github.com>
github-actions
bot
added
maven_tutorial
python_tutorial
repo
nodejs
android
multi
labels
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| # Check if the service has dependencies | ||
| if yq e ".services.${service}.depends_on" "$original_file" -e > /dev/null; then | ||
| # Read dependencies of the service | ||
| local dependencies=($(yq e ".services.${service}.depends_on | keys" "$original_file" -o json | jq -r '.[]')) |
Check notice
Code scanning / Shellcheck (reported by Codacy)
Prefer mapfile or read -a to split command output (or quote to avoid splitting). Note
| declare -A all_dependencies | ||
| services=$(yq e '.services | keys' "$original_file" -o json | jq -r '.[]') | ||
| for service in $services; do | ||
| dependencies=$(yq e ".services.$service.depends_on | keys" "$original_file" -o json | jq -r '.[]') |
Check notice
Code scanning / Shellcheck (reported by Codacy)
Variable was used as an array but is now assigned a string. Note
| services=$(yq e '.services | keys' "$original_file" -o json | jq -r '.[]') | ||
| for service in $services; do | ||
| dependencies=$(yq e ".services.$service.depends_on | keys" "$original_file" -o json | jq -r '.[]') | ||
| for dependency in $dependencies; do |
Check notice
Code scanning / Shellcheck (reported by Codacy)
Expanding an array without an index only gives the first element. Note
| for service in $services; do | ||
| dependencies=$(yq e ".services.$service.depends_on | keys" "$original_file" -o json | jq -r '.[]') | ||
| for dependency in $dependencies; do | ||
| all_dependencies["$dependency"]=1 |
Check notice
Code scanning / Shellcheck (reported by Codacy)
all_dependencies appears unused. Verify use (or export if used externally). Note
|
|
||
| # Generate the docker-compose file for the profile | ||
| echo "Generating docker-compose-$profile.yaml" | ||
| yq e ".services | with_entries(select(.key as \$k | .key == \"$included_services_list\"))" "$original_file" > "docker-compose-$profile.yaml" |
Check notice
Code scanning / Shellcheck (reported by Codacy)
included_services_list is referenced but not assigned. Note
| FROM jenkins/ssh-agent:6.12.0-jdk21 | ||
|
|
||
| # Install necessary C++ build tools | ||
| RUN apt-get update && apt-get install -y --no-install-recommends \ |
Check notice
Code scanning / Hadolint (reported by Codacy)
Pin versions in apt get install. Instead of apt-get install <package> use apt-get install <package>=<version> Note
| FROM jenkins/ssh-agent:6.12.0-jdk21 AS ssh-agent | ||
|
|
||
| # install dotnet dependencies | ||
| RUN apt-get update && apt-get install -y --no-install-recommends libc6 libgcc1 libgssapi-krb5-2 libicu72 libssl3 libstdc++6 zlib1g wget && apt-get clean && \ |
Check notice
Code scanning / Hadolint (reported by Codacy)
Pin versions in apt get install. Instead of apt-get install <package> use apt-get install <package>=<version> Note
| - name: Build and push the jenkins agent for cpp tutorial | ||
| # This step builds and pushes the Jenkins agent for the C++ tutorial | ||
| if: contains(env.files, 'dockerfiles/cpp/Dockerfile') | ||
| uses: docker/build-push-action@v6 |
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
| - name: Build and push the jenkins agent for dotnet tutorial | ||
| # This step builds and pushes the Jenkins agent for the C++ tutorial | ||
| if: contains(env.files, 'dockerfiles/dotnet/Dockerfile') | ||
| uses: docker/build-push-action@v6 |
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
| @@ -23,7 +23,7 @@ | |||
|
|
|||
| # This step installs Updatecli in the runner using the updatecli-action | |||
| - name: Install Updatecli in the runner | |||
| uses: updatecli/updatecli-action@v2.62.0 | |||
| uses: updatecli/updatecli-action@v2.82.0 | |||
Check warning
Code scanning / Semgrep (reported by Codacy)
An action sourced from a third-party repository on GitHub is not pinned to a full length commit SHA. Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Warning
No description provided.